Management plane protection

SrednjaNivo 2Automatskacisco-iosxr

Opis

The Management Plane Protection (MPP) feature provides the capability to restrict the interfaces on which network management packets are allowed to enter a device. The MPP feature allows a network operator to designate one or more router interfaces as management interfaces. The MPP protection feature, as well as all the management protocols under MPP, are disabled by default. This is part of the MPP setup. Audited against the hierarchical output of 'show running-config' (run 'terminal length 0' first; not 'show running-config formal').

Kako se proverava

Metod provere: Obrazac konfiguracije

Obrazac: (?m)^control-plane[^\n]*\n(?:[ \t][^\n]*\n)*?[ \t]+management-plane\b

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

! Configure the management plane so that only certain protocols connectced to certain interfaces can access this IOS-XR device. control-plane management-plane inband interface {interface} allow {protocol} peer address ipv4 {IP_address} out-of-band interface {interface} allow {protocol} peer address ipv4 {IP_address}

Svojstva

Operativni sistemi: Bilo koji
Oznake: cisco-iosxrnetworkmanagement-plane
Referenca: CIS Cisco IOS XR 7.x Benchmark v1.0.1 - 1.9 Management plane protection

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target cisco-iosxr --level 2